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January 05,2015 


Technical Research Department - TRD 
Kobry El Kobba 
Cairo - Egypt 


Att. Dr. Layla 


Offer N. 20140206.009-5.ES 


Subject: Proposal for Remote Control System 
Dear Sir, 


As for your kind request, please find the proposal regarding the Remote Control System - 
Galileo. 


It is however understood that this proposal and the agreement subsequent to your 
acceptance shall be automatically terminated pursuant to Sections 1353 and ff. of Italian 
Civil Code should any necessary license or authorization required for the export of the 
product - under Italian laws, the EU legislation and/or any other applicable laws - be not 
granted to HT within a period of 120 days from the date of your acceptance. It is also 
understood that HT shall give notice of the occurrence or the non-occurrence of the 
Condition in a timely manner, being further agreed that the above condition 
subsequent can be waived by HT also after its occurrence. 


Don't hesitate to contact me for any further information. 


Best Regards 


Key Account Manager 
HT S.r.l. 
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Remote Control System Description 


Please refer to the following document for technical description: 


+ _ HT _ Galileo SolutionDescription_ 2.3 


Remote Control System Technical Requirements 


Please refer to the following document for technical requirements: 


+ HT _ Galileo TechnicalRequirements_v2.3.pdf 


Professional Services: Installation and Training 


1. Installation 
The solution will be installed at Customer Site by HT field application engineers. 
Duration of the activities is actually planned for one (1) working day and it will be under 
Customer responsibility to prepare the Operation Environment as indicated in the 
Technical Requirements document. 


2. Training 
Following the installation, we will provide four (4) days of training focused on the usage of 
Remote Control System Galileo. 
This training will be performed at Client Site. 
Please refer to the following document for product training: 


+ HT Galileo Product Training v1.2 


3. Maintenance & Support 


Maintenance for one (1) year is included. 
Please refer to the following document for Maintenance and Support: 


+ _ HT Galileo SolutionDescription_2.3 


4. On Site Support 
On-site support will be delivered, if requested, by senior Hacking Team Field Application 
Engineer and will include assistance to the end user in the daily activity. 
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Remote Control System Galileo - Quotation Option 1) 


REMOTE CONTROL SYSTEM GALILEO LICENSE 

Description Product Code 
Front -End SW License (Collector) RCS-COL 
Back- End SW License (Master Node) RCS-MN 
Back- End SW License (Shard) RCS-SH 


© 
| 


oln 


Operators Console Up to 13 
Platforms 

PC Windows Platform (XP/Vista/7 - 32 & 64bit)  RCS-WIN Included 

Mac-Os Platform  RCS-MAC Included 

Linux Platform  RCS-LIN Included 

BlackBerry Platform RCS-BB Included 

Android Platform  RCS-AND Included 

iPhone Platform  RCS-I0S Included 

Windows Phone Platform RCS-WIP Included 

Agents SW License (N. of devices) RCS-ASL-200 
Infection Vectors 


1] 
[=] 
S 


Physical Infection Vectors (USB, CD) RCS-PHI Included 
Remote Mobile Infection  RCS-RMI 
Tactical Network Injector  RCS-TNI 

Yearly Attack Vector Service  RCS-AVS 1 year 


Anonymizers SW License RCS-ANM 
Alerting Option 


RCS-ALM Included 
Remote Control System Installation (1 day) RCS-INST (T&A included) 


Remote Control System Training (4 days) RCS-TR (T&A included) 


Remote Control System Advanced Training (5 days in Milan) up to 5 
people 


Yearly Maintenance & Support Service RCS-MAINT 1 year 


RCS-TRM Included 


TOTAL AMOUNT EURO 1.000.000,00 


(Signature and Stamp for Acceptance) 
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REMOTE CONTROL SYSTEM YEARLY SERVICES 
Product Code Price 
Euro 70.000,00 


Euro 132.500,00 


Description 
Yearly Attack Vector Service Fee RCS-EXP 


Yearly Maintenance & Support Service Fee RCS-MAINT 


REMOTE CONTROL SYSTEM OPTIONAL FEATURES 
Intelligence Module RCS-INT Euro 175.000,00 


REMOTE CONTROL SYSTEM OPTIONAL SERVICES 


Description Product Code Price 
Euro 30.000,00 


IT- Training (ITTraining_0.4) price per each course up to 5 people | RCS-TRA 
Euro 150.000,00 


ON-SITE Support Service (8 weeks) RCS-ONS 
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Remote Control System Galileo - Quotation Option 2) 


REMOTE CONTROL SYSTEM GALILEO LICENSE 

Description Product Code 
Front -End SW License (Collector) RCS-COL 
Back- End SW License (Master Node) RCS-MN 
Back- End SW License (Shard) RCS-SH 


@ 
Z 


Operators Console Uptos 
Platforms 
PC Windows Platform (XP/Vista/7 - 32 & 64bit) RCS-WIN Included 
BlackBerry Platform RCS-BB Included 
Android Platform RCS-AND Included 
Agents SW License (N. of devices) RCS-ASL-50 
Infection Vectors 
Physical Infection Vectors (USB, CD)  RCS-PHI Included 
Remote Mobile Infection  RCS-RMI 
Tactical Network Injector | RCS-TNI 
Yearly Attack Vector Service RCS-AVS 1 year 
RCS-ANM 
RCS-ALM Included 
Remote Control System Installation (1 day) RCS-INST (T&A included) 


Remote Control System Training (4 days) RCS-TR (T&A included) 


Remote Control System Advanced Training (5 days in Milan) up to 5 
people 


œ 


Anonymizers SW License 
Alerting Option 


RCS-TRM Included 


Yearly Maintenance & Support Service RCS-MAINT 1 year 


TOTAL AMOUNT EURO 645.000,00 


(Signature and Stamp for Acceptance) 
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REMOTE CONTROL SYSTEM YEARLY SERVICES 


Description Product Code Price 


Yearly Attack Vector Service Fee RCS-EXP Euro 70.000,00 


Yearly Maintenance & Support Service Fee RCS-MAINT Euro 105.000,00 


REMOTE CONTROL SYSTEM OPTIONAL FEATURES 
Description Product Code Price 
Intelligence Module RCS-INT Euro 60.000,00 


REMOTE CONTROL SYSTEM OPTIONAL SERVICES 
Description Product Code Price 
IT- Training (ITTraining_0.4) price per each course up to 5 people | RCS-TRA Euro 30.000,00 


ON-SITE Support Service (8 weeks) RCS-ONS Euro 150.000,00 
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Remote Control System Galileo - Quotation Option 3) 


REMOTE CONTROL SYSTEM GALILEO LICENSE 


Description Product Code 


Le) 
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Front -End SW License (Collector) RCS-COL 
Back- End SW License (Master Node) RCS-MN 
Back- End SW License (Shard) RCS-SH 
Operators Console Up to 13 
Platforms 

Android Platform RCS-AND Included 
Agents SW License (N. of devices) RCS-ASL-50 
Infection Vectors 


ou 
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Physical Infection Vectors (USB, CD) RCS-PHI Included 
Remote Mobile Infection  RCS-RMI 
Tactical Network Injector  RCS-TNI 
Yearly Attack Vector Service  RCS-AVS 1 year 
Anonymizers SW License RCS-ANM 
RCS-ALM Included 
Remote Control System Installation (1 day) RCS-INST (T&A included) 


Remote Control System Training (4 days) RCS-TR (T&A included) 


Remote Control System Advanced Training (5 days in Milan) up to 5 
people 


Yearly Maintenance & Support Service RCS-MAINT 1 year 


Alerting Option 


RCS-TRM Included 


TOTAL AMOUNT EURO 595.000,00 


(Signature and Stamp for Acceptance) 


REMOTE CONTROL SYSTEM YEARLY SERVICES 
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Product Code Price 
Euro 70.000,00 


Euro 95.000,00 


Description 
Yearly Attack Vector Service Fee RCS-EXP 


Yearly Maintenance & Support Service Fee RCS-MAINT 


REMOTE CONTROL SYSTEM OPTIONAL FEATURES 


Description Product Code Price 


Intelligence Module RCS-INT Euro 60.000,00 


REMOTE CONTROL SYSTEM OPTIONAL SERVICES 


Description Product Code Price 


IT- Training (ITTraining_0.4) price per each course up to 5 people | RCS-TRA Euro 30.000,00 


ON-SITE Support Service (8 weeks) RCS-ONS Euro 150.000,00 
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Every Concurrent Agent license can be used for an unlimited amount of times. Once 
the investigation is over and the backdoor is uninstalled, it can be used to infect 
another target. 

The total number of device and platforms can be used in any combination. 

Each agent license will work on any type of operating system that has been bought. 
Hardware Equipment is not included. 

The yearly maintenance fee price is calculated on the purchased configuration, if the 
configuration changes the maintenance price will be recalculated. 

Remote Attack Vectors Service is a yearly subscription to be purchased every year. 
In refer to the Advanced Training: all travel and accommodations cost are not included 
Prices for additional year of subscription for Maintenance & Support Service and 
Remote Attack Vectors Service additional are valid for purchase orders received 
within 2015. 


(Signature and Stamp for Acceptance) 


-10- 20140206.009-5.ES 


HT Sr. 
Headquarters: Via della Moscova, 13 20121 Milano 
Tel: +39.02.29060603 — Fax: +39.02.63118946 
e-mail: info@hackingteam.it - web: http://"ww.hackingteam.it 
P.IVA: 03924730967 — Capitale Sociale: € 223.572,00 i.v. 
N° Reg. Imprese / CF 03924730967 — N° R.E.A. 1712545 


Aa à mil sb dl & #S 7e ph GE vs ‘2 


JhackinoTeam! 


Terms& Conditions 


a. Warranty 


The warranty period for HT software products is one year starting from date of delivery. 


b. Financials 


. Pricing doesn't include VAT and local taxes. 
. Prices are reserved to Technical Research Department - TRD 
. Technical Research Department - TRD accepts to purchase the solution as above 
reported for a price of Euro 
. The End User Technical Research Department - TRD as to sign the attached 
“HT_EULAD” and the End User Statement. 
. Software Delivery and Product Training within 45 days upon the Purchase Order 
is received (to be agreed). 
. Terms of Payment 
+ 50% Down Payment at PO date 
+ 50% at Delivery Certificate signature date (please refer to the attached 
document) 
. Validity: The quotation is valid until 30 March 2015 


c. List of Attachments: 


HT_Galileo_SolutionDescription_2.3.pdf 
HT_Galileo Technical Requirements_v2.3.pdf 
HT_Galileo Product Training v1.2.pdf 
HT_Galileo Delivery Certificate v1.2.pdf 
EULAD 

E.U. Statement_1.0 


(Signature and stamp for Acceptance) 
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February 22, 2016 


Privacy International Report 


Nokia is committed to the Universal Declaration of Human Rights and the human rights principles of the 
United Nations’ Global Compact and has embedded them in our Code of Conduct and in our Human 
Rights Policy. We take steps to ensure that the technology we provide - legally and in good faith - will be 
used properly and lawfully. 


Regarding the case of Egyptian German Telecommunications Industries (EGTI), it was a joint venture of 
the former Siemens Networks and the Egyptian government, and it transferred to Nokia Siemens 
Networks with the formation of the joint venture in 2007. Today, Nokia operates in Egypt under Nokia 
Solutions and Networks S.A.E. a joint venture serving Egyptian telecommunications operators. 


As for Universal Advanced Systems, our investigations revealed a commercial arrangement we inherited 
from Siemens in 2007. We have not pursued new business with Universal Advanced Systems since then. 


Regarding Lawful Interception (LI) technology, as a telecommunications equipment vendor we provide 
LI technology to our operator customers. This capability is a prerequisite for telecommunications 
operators to obtain a license, and is required by law in virtually all countries globally. 


As for monitoring centers, Nokia divested this business in 2009, and we not do we believe that we had 
any such sales since then. When we sold the business, most customer records were transferred to the 
new owner and we do not have extensive visibility to possible pre-2009 sales. 


Nokia has worked to implement the UN Guiding Principles for Business and Human Rights since they 
were first launched in 2011. In connection with this work, we were the first telecommunications vendor 
to define and to implement a human rights due diligence process to minimize and to mitigate the 
possible risk of misuse of Nokia technology in human rights violations. 


As one of the founding members of the Telecommunications Industry Group, we remain committed to 
constructive dialogue with governments and NGOs around the complex and challenging issues of 
Internet censorship, privacy and surveillance. 


Should you have any further questions, please do not hesitate to contact us at any time. 


Sincerely yours, 


Sandra Cornet-Vernet Lehongre 


Director, Corporate ee 
on LA 
; = | 
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Dear Ms. Blum-Dumontet: 


As you know, Hacking Team software is sold exclusively to governments and 
government agencies. Sales are regulated by Italian authorities. In cases in 
which à separate company is involved, Hacking Team still requires end users to 
certify in their contracts that the software will be used for lawful purposes 
and not used for any military activity. However, as you also know, the company 
does not identify individual clients or confirm information gleaned from stolen 
documents. 


Privacy International has been à relentless critic of Hacking Team, and has 
enjoyed a good deal of publicity from this criticism. Nonetheless, I hope you 
will permit me to make a couple of obvious but generally ignored points about 
the product this company has developed and sells. 


Of course, safeqguards are important. That is why Hacking Team complies 
voluntarily and fully with the Wassenaar protocols implemented in Italy more 
than à year ago. For a Hacking Team sale to take place - to Egypt or elsewhere 
- it must be approved by the Italian authorities. We believe we are the only 
supplier of legal surveillance software to be subject to such regulation. 
Beyond complying with regulation, Hacking Team has always required customers to 
certify that they will use Hacking Team technology legally and not for military 
purposes. In fact, despite all the evidence published after the illegal attack 
on the company last July, there is nothing to show the company acted in any way 
illegally or in violation of any ban or regulation. Furthermore, the evidence 
clearly snows this technology is used as intended for law enforcement 
investigation and that the use of the technology is limited. 


It is also worth noting that the sale of legal surveillance technology to Egypt 
is entirely legal. Egypt is an ally of the West including the U.S, most 
European countries and even of Israel. Not only is the sale of software to 
Egypt permitted, but also Western governments permit the sale of heavy weapons 
including F-16 fighter planes and Harpoon missiles to Egypt. 


Finally, the sale of software for lawful surveillance is important for the 
protection of all of us. That is not only true of sales of such software to 
Western countries. Indeed, it may be even more important to provide tools for 
investigations in countries where there is wide-spread crime or terrorism or 
both. It should be obvious that investigating terrorists and their 
organizations in such a country could lead to the prevention of an attack in 
Paris, London or Berlin by those trained, financed and supported by elements 
that are active in the Middle East and elsewhere. 


I hope you will include a full perspective of the situation in your forthcoming 
report. 


Eric 


Dear Mrs. Blum-Dumontet, 


Thank you for your inquiry. First, I would like to make you aware that Siemens 
has transferred its network business to Nokia Siemens Networks, in April 2007. 
All relevant documents have been transferred to Nokia Siemens Networks as well, 
so we are not able to comment on the business that is related to Nokia Siemens 
Networks. Nokia Siemens Networks had been consolidated by Nokia. 


In August 2013, Nokia Siemens Networks became Nokia Solutions and Networks. It 
is since then wholly owned by Nokia and will continue to be consolidated by 
Nokia. 


I would like to ask you to address your questions to Nokia as we are unable to 
verify and to comment on your research. 


Best regards, 
Wolfram Trost 


